modify mainfest.json permissions